From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-ej1-f52.google.com (mail-ej1-f52.google.com [209.85.218.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C91F02836F for ; Mon, 22 Sep 2025 00:25:48 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.218.52 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1758500750; cv=none; b=O0c8/b+8TDrGfJEYkWKiKGwqCUVeSRx8yTqPPCYTJwVMDd2n2B84j3iyrwnQ+IaEN0BKBu1g9C1jxE7eXDdSWWJ34gsxDMq/fnLN2UR+1U3k5pAZrykK4UF/W+hD5FDVFdWsNnPSL5ZQFthTj6ebKhmMF9pMybByylEhyHjc7vo= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1758500750; c=relaxed/simple; bh=ZYxkvytXWzIneq3yvORv4oZVMuSuCQF+rZ03OyIv+xg=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=pnIX5LWwQX3yt5OjYkj7AEr0k8wOoE1717A6I+BKfrxaGF3PaEHgUX2y5r5gm9bfYQ2nSvDVdSqHx8q7pJcy7kSDRAVrpwKwnGlU18HE9IJqucV4DNYQs2WaeB2+lNOuEkwA76UQCVuHZnYji4UalZ0jKED8+Y4mYbxwe9jIoPU= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=Sex1tRY4; arc=none smtp.client-ip=209.85.218.52 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Sex1tRY4" Received: by mail-ej1-f52.google.com with SMTP id a640c23a62f3a-b0428b537e5so519366266b.3 for ; Sun, 21 Sep 2025 17:25:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1758500747; x=1759105547; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=Qqow7NfKYjPX1vfqX6Q3EwqJhfVfsFixre7RiEXeVic=; b=Sex1tRY4smHZjwxR9y/gvzrQRCmWL2Wpx8XLjPy6G7vxxZVb9nJ2TJGuk94Rm0L5bX XHSQnft4THbXJSqg7cLjzuv1zAKjKdhvT6dCdHQWm7kr00JjDmQ52RkXFMXmP5fXdgdg f3/B7sdKpvJ09fR7gcfavrvsCyLyiTIl6jrgu5heWK1mwBjhJPOR8TuI9YiAEPQAIQJi qG8UkZeVOvVZ3he9RK/KZhwWhxc7INCnIPiEoV7u/LcYTPNXF27XC6T9brP5HjchDQ+j KpJ0neABxVhrhNQhq933ihNSBbxa6r82Rdt0zldOHKxlFswBQirmqmlzoJeocoXLt+no kSLA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758500747; x=1759105547; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Qqow7NfKYjPX1vfqX6Q3EwqJhfVfsFixre7RiEXeVic=; b=rXiDeXL0bKueI9+18rEmv2PEBLFp1aMdPVUe5FeYR7mF7a8MQmtGcl2twAO36YKCXu ex7Gs4k9XnThdr44RNB4Cif2pk/G7gUEfe4+wfi0u02hnYZzsHQlmcMt9cOLaJ/I8UfL 4Sp2glzxC9equO8TBZxk0hdmP875SwvRpCEvydsDrHjgbzBugnK1k0J4meSDS5oOQIQm U5Lq1upx26Y5MGby3b7jA7OhgSNB3YfETustE6DB/ZcaikCst09u4VStPOK2ryS7uWNt 8yWkuMqqMvF4h8bhEzYhm++x1J/MqYwyTajziCsfaAc3MmN55+2CEP5s+sp1uXuILROY aQyA== X-Forwarded-Encrypted: i=1; AJvYcCX1kAY4kLzZWOWf9aoaU3KPWK2FS6rGcKu7FyizM/cA26OA5r9TOdxi73VJ4NEAaxd6XEokncFEonE=@vger.kernel.org X-Gm-Message-State: AOJu0YwiGO2qz3Q4dIb2s6bGxai27lEg9pcDnW8H+JcOmsEMfG4o1L2t P+oKuRYrAokgEoi8flqhi5y7qzC++BWzS8QUst3UAKO1h/3oJVhFmmmH X-Gm-Gg: ASbGncuL0E9Ax92zkswedS3QWk+1dOFeee1A/L4OyVQy7YmujVPeOOOikVG4kRrYiM1 U4Sf6I89XLKriC5M1y7NLmaZhS29n6ynJ/ARN8/ZsHk+9AcHfA823uq8Ylnno33aPntl4d/vyFF lxvrXtQtnawvrIWn0h827kzZy0tmV+b86uQj2NSZPTBhLLUrC+DfS3vtkUV5GkQbVqtiBFo+tVm Wl9jRDHNaRexWskoWOvM44F2Y6AMAsXp2CA9tC+oneT/UeOW2nI0A8PJHKmNS9q9BI8lAk9E2zR +tmzkAHBtM19KohMoBtftZRbeMcXkXXDx7b7NUgyNBKi8xbuELZ/Wk/MpJ3A4wTi6hwlMP1O9rV wN6S0HgfghFy+8N//3hk= X-Google-Smtp-Source: AGHT+IHsbRcdXtV5go1CgGoP+4ok3H92iE4YLKzIeNlhHJMbPBRzYcrLPwri6hTQjbCbj0oX1PYScQ== X-Received: by 2002:a17:907:3fa0:b0:b0e:a66f:478e with SMTP id a640c23a62f3a-b24ed97c8fbmr1084255566b.14.1758500746934; Sun, 21 Sep 2025 17:25:46 -0700 (PDT) Received: from localhost ([212.73.77.104]) by smtp.gmail.com with UTF8SMTPSA id a640c23a62f3a-b297f3f426csm374532266b.7.2025.09.21.17.25.44 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 21 Sep 2025 17:25:46 -0700 (PDT) From: Askar Safin To: cyphar@cyphar.com Cc: alx@kernel.org, brauner@kernel.org, dhowells@redhat.com, g.branden.robinson@gmail.com, jack@suse.cz, linux-api@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, linux-man@vger.kernel.org, mtk.manpages@gmail.com, safinaskar@zohomail.com, viro@zeniv.linux.org.uk Subject: Re: [PATCH v4 03/10] man/man2/fspick.2: document "new" mount API Date: Mon, 22 Sep 2025 03:25:29 +0300 Message-ID: <20250922002529.95574-1-safinaskar@gmail.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20250919-new-mount-api-v4-3-1261201ab562@cyphar.com> References: <20250919-new-mount-api-v4-3-1261201ab562@cyphar.com> Precedence: bulk X-Mailing-List: linux-man@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit > With the notable caveat that in this example, mount(2) will clear all other filesystem parameters (such as MS_NOSUID or MS_NOEXEC); fsconfig(2) will only modify the ro parameter. MS_NOSUID and MS_NOEXEC are not filesystem parameters. They can be set per-mount, but not per-filesystem. Here is list of all filesystem-agnostic per-superblock parameters: https://elixir.bootlin.com/linux/v6.17-rc6/source/fs/namespace.c#L4103 Note that these SB_* constants are equal to corresponding MS_* constants. As you can see, there is no NOSUID and NOEXEC in that list. Also, SB_NOSUID does exist: https://elixir.bootlin.com/linux/v6.17-rc6/source/include/linux/fs.h#L1240 . So, it seems that "NOSUID superblock" does exist as a concept. But, thanks to code in path_mount (provided above) user cannot (in filesystem-agnostic way) make given superblock NOSUID. So, from user point of view, NOSUID and NOEXEC are not filesystem parameters. If you need some example of filesystem parameter, I suggest MS_SYNCHRONOUS, I used it here: https://lore.kernel.org/all/198d1f2e189.11dbac16b2998.3847935512688537521@zohomail.com/ -- Askar Safin